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REMARKS 

The Examiner is thanked for the courteous telephone interview granted 
Applicants' representative on August 9, 2004. This Response has been prepared pursuant 
to comments made during the interview. 

In numbered paragraph 4 on page 2 of the Office Action, the Examiner indicates 
that the effective filing date for the subject matter defined in the pending claims in the 
application is 1 2/20/2000. This is incorrect. The application was filed on December 18, 
2000, as indicated by Patent and Trademark Office records, aud the effective filing date 
of the application is December 18, 2000. It is respectfully requested that the Examiner 
acknowledge the correct effective filing date of the application in the next Office 
Communication. 

The specification has been amended to correct the typographical error noted by 
the Examiner on page 6, line 17. The Examiner is thanked for bringing this error to 
Applicants' attention. No new matter has been added by the amendments to the 
specification. 

The Abstract paragraph has also been amended and the title of the application has 
been deleted from the Abstract page as requested by the Examiner. Although Applicants 
believe that inclusion of the title of the application on the Abstract page is proper, and 
that neither 37 CJFit 1.72 nor MPEP § 608.01(b) preclude inclusion of the title on the 
Abstract page, the title has been deleted herein to expedite prosecution. 

Claims 1-57 remain pending in the present application. No claims have been 
amended, and no claims have been canceled. Applicants have carefully considered the 
cited references and the Examiner's comments, but believe claims 1-57 patentably 
distinguish over the references and are allowable in their present form. Reconsideration 
of the rejection is, accordingly, respectfully requested in view of the following 
comments. 
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1. 35 U.S.C. S 102. Anticipation 

The Examiner has rejected claims 1-14, 20-33 and 39-52 under 35 U.S.C. 
§102(b) as being anticipated by He (U.S. Patent No. 5,944,824). This rejection is 
respectfully traversed. 

Claim 1 of the present application reads as follows: 

1 . A method in a data processing system for changing a plurality of target 
passwords in a single sign-on environment, comprising the steps of: 

in response to receiving a change instruction identifying a first single sign- 
on password, changing the first single sign-on password to create a second single 
sign-on password; 

retrieving a target password; and 

modifying the target password in a user selected manner to match the 
second single sign-on password to create a modified target password. 

Applicants submit that He does not disclose the claimed steps of: 

in response to receiving a change instruction identifying a first single sign- 
on password, changing the first single sign-on password to create a second single 
sign-on password; 

and 

modifying the target password in a user selected manner to match the 
second single sign-on password to create a modified target password. 

In rejecting the claims, the Examiner states the following: 

Claim 1 recites changing the SSO password in response to receiving a 
change instruction. He disclosed a programmed method and system for changing 
passwords in a Single Sign-On (SSO) environment (See HtfCol. 13, Paragraph 
3-7). He disclosed that in response to a request to modify a user account (See He 
CoL 13 Lines 12-13) a new password is generated (See He Col 13 Lines 20-22) 
and the old password is set to the new password (See He Col 13 Lines 43-45). 

Claim 1 further recites retrieving and modifying a target password. He 
disclosed changing a target NE password to the specified new password (See He 
Col. 13 Lines 31-35. 

Office Action dated May 14, 2004, pages 3 and 4. 

In rejecting the claims, the Examiner does not comment with respect to the claim 
limitation "in response to receiving a change instruction identifying a first single sign-on 
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password, changing the first single sign-on password to create a second single sign-on 
password", and does not indicate where this limitation is disclosed in He. This limitation 
is not disclosed in Col. 13, Paragraphs 3-7 of He referred to by the Examiner, nor have 
Applicants been able to identify any such disclosure in He. 

He is directed to permitting a single sign-on (SSO) of users to a plurality of 
network elements, and describes data structures and procedures that support the SSO 
functionality in a distributed network environment He does not relate to changing an 
SSO password, and does not disclose changing a first single sign-on password to a 
second single sign-on password in response to receiving a change instruction identifying 
the first single sign-on password. 

CoL 13 ? Paragraphs 3-7 of He reads as follows: 



Precondition 250: A user account is being created or modified. Access by 
the user 12 to an NE 20 is defined and the user 12 is granted with the SSO 
capability to this NE 20. The network security administrator 17 who is carrying 
out the task is an authenticated user to the security server 15 node. 

The <User Log-on Identified is created 252 randomly or manually for the 
user account. The <Present Password> is created 254 randomly or manually for 
the user account. The <New Password> is created 256 randomly or manually for 
the user account. Next, the NE record is fetched 258 from the security database 13 
at the security server 15 node. The <Super-User Logon Identifier, Present 
Password, New Password> for the NE is retrieved 260 from the record. 

At this point, the process continues when a message containing <Super- 
User Log-on Identifier, Present Password, New Password> for the NE along with 
<NE, User Log-on Identifier, Present Password> for the user account is sent 262 
to the secure terminal server 24 that serves the NE. The secure terminal server 24 
invokes a local procedure 263 that performs the log-in sequence of the NE 20, 
logs in as a super user, creates or resets the user account in the NE 20 changes the 
super user password to a new one using the data provided in the message. The 
security server 15 returns control to the main procedure at the security server 15 
node on successful completion of the steps. 

Next, the <Present Password> for the super user is set 264 to the value of 
<New Password> in the same record and set the <New Password> for the super 
user 94 to a randomly generated one. This data is written 266 into the super user 
account in the security database 13 at the security server 15. 

Post result 270: The user password entry is created for the user account 
and is synchronized with that in the NE 20. 
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Col. 13, Paragraphs 3-7 of He do not discuss changing an SSO password and 
certainly do not disclose the claimed step of "in response to receiving a change 
instruction identifying a first single sign-on password, changing the first single sign-on 
password to create a second single sign-on password". The paragraphs instead relate to 
the precondition that a user account is being created or modified, and that access to an 
NE (Network Element) is defined and granted to a user with SSO capability The 
paragraphs do not discuss changing an SSO password. The reference only discloses 
changing an NE password or a super user password (which, as described in Col. 1 1 Lines 
3-11 of He, is a separate identifier that supports the implementation of SSO and assists, 
for example, in setting up and changing user passwords in the NE). 

He also does not disclose the claimed step of "modifying the target password in a 
user selected manner to match the second single sign-on password to create a modified 
target password". Specifically, since He does not disclose changing a first SSO password 
to a second SSO password, as indicated above; the reference also does not disclose 
modifying a target password in a user selected manner to match the second SSO 
password to create a modified target password. Only the present application contains 
such a disclosure. 

In order to anticipate a claim under 35 U.S.C. §102, a reference must clearly and 
unequivocally disclose every feature recited in the claim. He docs not disclose "in 
response to receiving a change instruction identifying a first singte sign-on password, 
changing the first single sign-on password to create a second single sign-on password" or 
"modifying the target password in a user selected manner to match the second single 
sign-on password to create a modified target password" as recited in claim 1 ; and, 
therefore, cannot anticipate claim 1. 

For at least all the above reasons, claim 1 is not anticipated by He, and withdrawal 
of the rejection thereunder is respectfully requested, 

Claims 2-14 depend from and further restrict claim 1, and arc also not anticipated 
by He, at least by virtue of their dependency. 

Independent claims 20 and 39 recite limitations similar to claim 1, and are also 
not anticipated by He for substantially the same reasons as discussed above with respect 
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to claim 1. Claims 21-33 depend from claim 20, and claims 40-52 depend from claim 39, 
and are also not anticipated by He, at least by virtue of their dependency. 

Therefore, the rejection of claims 1-14, 20-33 and 39-52 under 35 U.S.C. § 102(e) 
has been overcome. 

Furthermore, He does not teach, suggest, or give any incentive to make the 
needed changes to reach the presently claimed invention. He is concerned with 
components and procedures for supporting an SSO functionality, and is not concerned 
with changing an SSO password. Accordingly, the disclosure in He would not lead one of 
ordinary skill in the art to modify He to reach the present invention when the reference is 
examined as a whole. Absent some teaching, suggestion, or incentive to modify He in 
this manner, the presently claimed invention can be reached only through an improper 
use of hindsight using Applicants' own disclosure as a template to make the necessary 
changes to reach the claimed invention. 

II. 35 U.S.C. S 103, Obviousness 

The Examiner has rejected claims 15, 34 and 53 under 35 U.S.C. §103(a) as being 
unpatentable over He in view of Redpath (U.S. Patent 5,854,629). This rejection is 
respectfully traversed. 

Redpath is cited as disclosing the use of GUIs to simplify interaction with 
computer programs. The Examiner states that it would have been obvious to the ordinary 
person skilled in the art at the time of the invention to employ the teachings of Redpath in 
He such that the user is supplied a GUI menu in order to select a password generation 
method. 

Claims 1 5, 34 and 53, however, depend from and further restrict independent 
claims 1 , 20 and 39, respectively, and Redpath does not supply the deficiencies in He as 
discussed above. Accordingly, for at least the reasons discussed above, claims 15, 34 and 
53 are not obvious over He in view of Redpath. 

The Examiner has rejected claims 16, 35 and 54 under 35 U.S.C. § 103(a) as 
being unpatentable over He in view of Prafullchandra (U.S. Patent 5,734,718). This 
rejection is respectfully traversed. 
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Prafullchandra is cited as teaching that requiring users to change passwords at 
predetermined intervals can enhance system security. The Examiner states that it would 
have been obvious to the ordinary person skilled in the art at the time of the invention to 
employ the password aging and changing policy of Prafiillchandra in He. 

Claims 1.6, 35 and 54, however, depend from and further restrict independent 
claims 1, 20 and 39, respectively, and Prafullchandra does not supply the deficiencies in 
He as discussed above. Accordingly, for at least the reasons discussed above, claims 16, 
35 and 54 are not obvious over He in view of Prafiillchandra. 

The Examiner has also rejected claims 17-19, 36-38 and 55-57 under 35 U.S.C 
§103(a) as being unpatentable over He in view of Prafullchandra. The Examiner states 
that it would be obvious to use the aging policy of Prafullchandra to all the types of 
passwords of He. 

Claims 17-19, 36-38 and 55-57, however, depend from and further restrict 
independent claims 1, 20 and 39, respectively, and Prafullchandra does not supply the 
deficiencies in He as discussed above. Accordingly, for at least the reasons discussed 
above, claims 17-19, 36-38 and 55-57 are not obvious over He in view of Prafullchandra. 

Therefore, the rejections of claims 15-19, 34-38 and 53-57 under 35 US-C. 
§ 103(e) have been overcome. 
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III. Conclasion 

For all the above reasons, it is urged that claims 1.-57 patentably distinguish over 
tbe cited references and are allowable in their present form This application, accordingly , 
is believed to be in condition for allowance, and it is respectfully requested that the 
Examiner so find and issue a Notice of Allowance in due course. 

The Examiner is invited to call the undersigned at the below-listed telephone 
number if in the opinion of the Examiner such a telephone conference would expedite or 
aid the prosecution and examination of this application. 

DATE: f^uavsi J^2s>o >j 

Respectfully submitted, 

Gerald H. GlariCTnan 
Reg. No. 25,035 
Yee & Associates, P.C. 
P.O. Box 802333 
Dallas, TX 75380 
(972) 367-2001 
Attorney for Applicants 
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